Practical cyber security guidance, technical research, and lessons from Malware Security practitioners. https://malsec.com.au/blog/ en-AU From a crafted email to an agent crossing into production: five security questions to answer before AI can read, decide and act. https://malsec.com.au/blog/securing-agentic-ai-before-production/ https://malsec.com.au/blog/securing-agentic-ai-before-production/ Sat, 25 Jul 2026 00:00:00 GMT A practical lesson in why maturity claims fail—and how to prepare evidence that represents the environment you actually operate. https://malsec.com.au/blog/preparing-for-essential-eight-assessment/ https://malsec.com.au/blog/preparing-for-essential-eight-assessment/ Thu, 12 Mar 2026 00:00:00 GMT Why a list of IP addresses is not a test plan—and the five decisions that turn a vague scope into useful assurance. https://malsec.com.au/blog/scoping-a-penetration-test/ https://malsec.com.au/blog/scoping-a-penetration-test/ Thu, 22 Jan 2026 00:00:00 GMT The write-up for the Blackbag challenge run by Malware Security & Redacted Information Security for BSides Adelaide 2024 https://malsec.com.au/blog/blackbag-adl-2024/ https://malsec.com.au/blog/blackbag-adl-2024/ Thu, 30 May 2024 00:00:00 GMT A concise guide to understanding the anatomy of cloud security assessments and authorisations https://malsec.com.au/blog/cloud-security-assessments-irap/ https://malsec.com.au/blog/cloud-security-assessments-irap/ Wed, 10 Jan 2024 00:00:00 GMT Understanding the key differences and choosing the right approach for your organisation's security goals. https://malsec.com.au/blog/vulnerability-scans-vs-penetration-tests-vs-red-teams/ https://malsec.com.au/blog/vulnerability-scans-vs-penetration-tests-vs-red-teams/ Wed, 25 Oct 2023 00:00:00 GMT